Re: body_checks regex explained in detail Re: Inline image spams

Anthony Campbell <ac-MeA/[email protected]> Tue, 26 Dec 2006 12:07:48 +0000
Newsgroups gmane.mail.spam.spamprobe.general
Message-ID <[email protected]>
On 24 Dec 2006, Anthony Campbell wrote:
> On 24 Dec 2006, Darxus-5+gNnNaL/BD/[email protected] wrote:
> > On 12/24, Anthony Campbell wrote:
> > > Thanks for the clarification. I do get quite a lot of genuine mail with
> > > attachments which would presumably be rejected by this. Or am I missing
> > > something?
> > 
> > Email with attached images (or any other attachments) will go through,
> > and email with images in the body which are hosted on a webserver instead
> > of attached will go through.  It will block all emails that have
> > images shown in the body which are attached, including legit emails.
> > But legit senders who hit this filter will get an error message telling
> > them the reason.
> 
> Ah - I think we may have been at cross-purposes in this discussion. The
> emails I have trouble with *do* have the images attached; they are not
> shown in the body. 
> 
> The reason they get through Spamprobe is that they continually mutate
> the text. They are similar to the AIDS or influenza virus; their
> antigenicity keeps changing randomly.
> 

Sorry - ignore this; we *are* talking about the same thing. I hadn't
looked at the plain text of the emails (as opposed to what mutt shows
me) to see the cid: stuff.

Anthony

-- 
Anthony Campbell - ac-MeA/[email protected] 
Microsoft-free zone - Using Linux Gnu-Debian
http://www.acampbell.org.uk (blog, book reviews, 
on-line books and sceptical articles)


-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV